We recently did a clean install of several modules on a new Windows 2016 server, and I find that there are now 2 pcaps installed.
Orion Platform 2018.4 HF3
NPM 12.4
NetPath 1.1.4
NCM 7.9
SAM 6.8.0
NTA 4.5.0
VNQM 4.5.1
Toolset 11.0.7
I then did an upgrade on another Windows 2016 server, and it, too, has both pcaps installed:
Orion Platform 2019.2
NPM 12.5
NetPath 1.1.5
NCM 8.0
SAM 6.9.0
NTA 4.6.0
VNQM 4.6.0
IPAM 4.9.0
Kiwi 9.6.7
I think if these are not configured properly, there could be a clash between the 2. I know that I have struggled with simultanous NetPath/Wireshark/Kiwi issues, and have been forced to abandon Wireshark. It sure would be nice to hear of a strategy in regard to packet capture by SolarWinds as a company, as opposed to individual products.
It also sure would be nice to have a list of non-SolarWinds apps that various modules install, such as these pcaps, .NET, C++ libraries, etc. This is also growing problem as we troubleshoot vulnerabilities scanned by Nessus.
Reference:
Npcap vs WinPcap
